Buffer Overflow Vulnerability in Multiple Siemens Products (CNVD-2021-89441)

Capital VSTAR is a complete solution. the Nucleus NET module integrates a range of standards-compliant networking and communications protocols, drivers and utilities to provide full-featured networking support in any embedded device. the Nucleus RTOS is a microkernel-based real-time operating system. A buffer overflow vulnerability exists in several Siemens products. The vulnerability stems from the fact that when processing DHCP ACK messages, the DHCP client application does not validate the length of the vendor option and an attacker can exploit the vulnerability to cause a denial of service condition.